General
-
Target
912df64e26edbea1bd2dd5aa482861408af3e299a348eea707f29521efe421f1
-
Size
415KB
-
Sample
220116-lkp92affgj
-
MD5
af80f08d70be602fefa4aec435fe9617
-
SHA1
8cf107edac47f224ca7dea385d85d0febf586ba0
-
SHA256
912df64e26edbea1bd2dd5aa482861408af3e299a348eea707f29521efe421f1
-
SHA512
ece187ae4d75991209a64c64d9e6b4fecb9244fb406c0ec7e776d5c30c98d01207d3381b67cc6cbf3eb120b6bd836ae1da7144f9d5ec16b9ffa953a583b79394
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:34865
Targets
-
-
Target
912df64e26edbea1bd2dd5aa482861408af3e299a348eea707f29521efe421f1
-
Size
415KB
-
MD5
af80f08d70be602fefa4aec435fe9617
-
SHA1
8cf107edac47f224ca7dea385d85d0febf586ba0
-
SHA256
912df64e26edbea1bd2dd5aa482861408af3e299a348eea707f29521efe421f1
-
SHA512
ece187ae4d75991209a64c64d9e6b4fecb9244fb406c0ec7e776d5c30c98d01207d3381b67cc6cbf3eb120b6bd836ae1da7144f9d5ec16b9ffa953a583b79394
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-